CVE-2021-40855

CRITICO 9.8CVE-2021-40855 · Published 21/01/2022 · updated 17/06/2026

In breve

CVE-2021-40855 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda technical specifications for digital covid certificates (europa).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.66%, superiore al 51.7% delle vulnerabilità.
Correzione: aggiornare a 1.1 o successiva.

Package	Affected versions	Patched versions
technical specifications for digital covid certificates europa	`< 1.1`	`1.1`

Description

The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.

References

eu-digital-green-certificates/dgc-overview security advisory · Third Party Advisory
consilium.europa.eu/en/policies/coronavirus/eu-digital-covid-certificate · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free